1. 执行下面批处理文件....
set SERVER_DN="CN=localhost, OU=a, O=b, L=c, S=GuangDong, C=CN"
set CLIENT_DN="CN=Client, OU=a, O=b, L=c, S=GuangDong, C=CN"
set KS_PASS=-storepass abc
set KEYINFO=-keyalg RSA
keytool -genkey -alias Server -dname %SERVER_DN% %KS_PASS% -keystore server.keystore %KEYINFO% -keypass abc -validity 3650
keytool -export -alias Server -file localhost.cer %KS_PASS% -keystore server.keystore
keytool -import -file localhost.cer %KS_PASS% -keystore client.truststore -alias serverkey -noprompt
keytool -genkey -alias Client -dname %CLIENT_DN% %KS_PASS% -keystore client.keystore %KEYINFO% -keypass abc
keytool -export -alias Client -file localhost.cer %KS_PASS% -keystore client.keystore
keytool -import -file localhost.cer %KS_PASS% -keystore server.truststore -alias clientkey -noprompt
2,修改Tomcat/conf/server.xml 配置文件...
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" keystoreFile="C:/Tomcat559/ssl/server.keystore" keystorePass="abc"
truststoreFile="C:/Tomcat559/ssl/server.truststore" truststorePass="abc" sslProtocol="TLS"/>
3, Note: 使用上述配置时需将密码abc ,SERVER_DN及CLIENT_DN改为自己对应的值....
4, 下面链接有详细介绍....
http://jakarta.apache.org/tomcat/tomcat-5.5-doc/ssl-howto.html